CVE-2004-0192

Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a management session via a /sgmi URL that contains malicious script, which is not quoted in the resulting error page.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

4.48% chance of exploitation in the next 30 days, 91th percentile

Published

2004-03-04

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/23764

References

• CVE Record
• NVD entry

Related

• CVE-2004-0191
• CVE-2004-0194
• CVE-2004-0189
• CVE-2004-0200
• CVE-2004-0188
• CVE-2004-0204